NetSight
IP …
medium6.5

CVE-2004-1339

SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to…

Impact

SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the new.table_name or new.column_name parameters.

Affected products

VendorProductAffected versions
OracleDatabase Server
Version 10.2.1
OracleOracle9i
Versions 9.0, 9.0.1, 9.0.1.2, 9.0.1.3, 9.0.1.4, 9.0.2

Weakness classification

CWE-89

References